A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-develUpgrade libsmbclient-develUpgrade libwbclient-devel | May 4, 2022 | May 5, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 5, 2021 |
| Amazon Linux Ami 2 | — | Upgrade samba-common-toolsUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade sambaUpgrade samba-develUpgrade ctdb-testsUpgrade samba-pythonUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-dcUpgrade ctdbUpgrade samba-dc-libsUpgrade samba-python-testUpgrade samba-winbindUpgrade samba-vfs-glusterfsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-debuginfoUpgrade libsmbclientUpgrade samba-client | Jul 2, 2021 | May 5, 2021 |
| Amazon_linux | — | Upgrade samba | Feb 19, 2022 | Apr 29, 2021 |
| Centos_linux | — | Upgrade python3-sambaUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade sambaUpgrade samba-krb5-printingUpgrade libsmbclientUpgrade samba-pythonUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-dc-libsUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-client-libs-debuginfoUpgrade samba-commonUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-develUpgrade samba-common-toolsUpgrade samba-test-debuginfoUpgrade samba-winexeUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade ctdbUpgrade samba-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-test-libs-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-dcUpgrade python3-samba-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-test-libsUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-testUpgrade samba-debugsourceUpgrade ctdb-tests-debuginfoUpgrade ctdb-testsUpgrade libwbclient-debuginfo | Jun 9, 2021 | May 5, 2021 |
| Debian | — | Upgrade samba | May 31, 2021 | May 5, 2021 |
| Freebsd | — | Upgrade samba413Upgrade samba412Upgrade samba414 | Nov 4, 2022 | May 1, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-libsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-pythonUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-libsUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libwbclientUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-python | Oct 26, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade libwbclientUpgrade samba-pythonUpgrade samba-common-tools | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade python3-samba-testUpgrade python2-samba-testUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade samba-testUpgrade sambaUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade ctdbUpgrade samba-commonUpgrade python2-samba | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libwbclientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclient | Aug 10, 2021 | May 5, 2021 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 5, 2021 |
| Oracle_linux | — | Upgrade samba-common-libsUpgrade python3-sambaUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-winexeUpgrade python3-samba-testUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libwbclientUpgrade ctdb-testsUpgrade samba-dcUpgrade samba-develUpgrade samba-testUpgrade samba-pythonUpgrade samba-commonUpgrade samba-python-testUpgrade samba-vfs-glusterfsUpgrade samba-pidlUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade sambaUpgrade libwbclient-develUpgrade libsmbclientUpgrade ctdb | Jun 10, 2021 | Apr 29, 2021 |
| Qnap Qts | — | Upgrade QNAP QTS to the latest version | Aug 4, 2025 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade samba-client-libsNo solution existsUpgrade samba-test-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-debuginfoUpgrade samba-pidlUpgrade samba-testUpgrade samba-develUpgrade samba-commonUpgrade samba-winexe-debuginfoUpgrade samba-test-libsUpgrade samba-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade ctdbUpgrade libsmbclient-develUpgrade samba-libsUpgrade libsmbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-sambaUpgrade sambaUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-test-libs-debuginfoUpgrade ctdb-testsUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-python-testUpgrade samba-pythonUpgrade samba-winbind-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-winexeUpgrade ctdb-debuginfoUpgrade samba-winbindUpgrade python3-samba-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-glusterfsUpgrade ctdb-tests-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-dcUpgrade samba-winbind-modulesUpgrade samba-debugsourceUpgrade samba-clientUpgrade libwbclient-debuginfoUpgrade libsmbclient | Jun 9, 2021 | May 5, 2021 |
| Rocky_linux | — | Upgrade python3-sambaUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbindUpgrade libwbclient-develUpgrade ctdb-tests-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libwbclient-debuginfoUpgrade sambaUpgrade samba-debuginfoUpgrade samba-libsUpgrade samba-common-libs-debuginfoUpgrade samba-testUpgrade libsmbclient-debuginfoUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade ctdb-testsUpgrade libwbclientUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-tools-debuginfoUpgrade samba-common-libsUpgrade samba-winexeUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libs-debuginfoUpgrade ctdbUpgrade python3-samba-testUpgrade python3-samba-debuginfoUpgrade samba-develUpgrade samba-test-libsUpgrade samba-libs-debuginfoUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-debuginfoUpgrade libsmbclientUpgrade samba-client-libs-debuginfoUpgrade samba-client-debuginfo | May 5, 2022 | May 5, 2021 |
| Samba | — | Upgrade to Samba 4.14.4 or later.Upgrade to Samba 4.13.8 or later.Upgrade to Samba 4.12.15 or later. | Jun 11, 2021 | May 5, 2021 |
| Suse | — | Upgrade samba-clientUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc0-32bitUpgrade libsmbldap0-32bitUpgrade libldb1Upgrade libsamba-credentials0Upgrade libndr0Upgrade libsamba-hostconfig0Upgrade libsmbldap2Upgrade libsamba-passdb-develUpgrade libsamba-util0-32bitUpgrade libndr1Upgrade libsamba-util-develUpgrade libsamba-util0Upgrade libndr-standard-develUpgrade libndr-standard0Upgrade libwbclient0Upgrade samba-libs-pythonUpgrade samba-ad-dc-32bitUpgrade libtevent0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-policy-develUpgrade libdcerpc-samr-develUpgrade samba-libs-32bitUpgrade libsmbclient0Upgrade libsamdb-develUpgrade libsmbconf0Upgrade libtevent-util-develUpgrade libsamba-errors-develUpgrade libsmbclient-develUpgrade ctdbUpgrade libtdb1Upgrade libsamba-policy0-python3-32bitUpgrade samba-client-32bitUpgrade samba-krb-printingUpgrade libsamba-policy-python3-develUpgrade libnetapi-develUpgrade libsamba-credentials0-32bitUpgrade libsmbclient0-32bitUpgrade samba-client-libs-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-libsUpgrade samba-develUpgrade libsmbconf0-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc-samr0Upgrade libndr0-32bitUpgrade samba-testUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig-develUpgrade libtevent0Upgrade libsamba-policy0-python3Upgrade libsamba-passdb0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-winbind-32bitUpgrade samba-32bitUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbindUpgrade libdcerpc-binding0Upgrade libsamba-passdb0Upgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-develUpgrade samba-gpupdateUpgrade libtevent-util0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-winbind-libs-32bitUpgrade libtdb1-32bitUpgrade libndr1-32bitUpgrade samba-winbind-libsUpgrade samba-dsdb-modulesUpgrade libsmbldap0Upgrade samba-ad-dc-libsUpgrade libsmbldap-develUpgrade samba-libs-python3Upgrade libtevent-util0Upgrade libsamba-credentials-develUpgrade libsamba-policy0Upgrade libndr-krb5pac-develUpgrade libnetapi-devel-32bitUpgrade libndr-nbt-develUpgrade libndr-develUpgrade libnetapi0Upgrade samba-docUpgrade samba-core-develUpgrade libwbclient0-32bitUpgrade libtalloc2Upgrade libsamdb0Upgrade libndr-nbt0-32bitUpgrade libdcerpc0Upgrade ldapsmbUpgrade samba-cephUpgrade libdcerpc-atsvc0Upgrade libndr-standard0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-errors0Upgrade samba-libs-python3-32bitUpgrade samba-ldb-ldapUpgrade samba-python3Upgrade libtalloc2-32bitUpgrade libsmbconf-develUpgrade sambaUpgrade libndr-krb5pac0Upgrade libwbclient-develUpgrade libndr-nbt0Upgrade samba-ad-dcUpgrade ctdb-tests | Apr 30, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 30, 2021 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub